Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.1Nhost is an open source Firebase alternative with GraphQL.Check if you run itEPSS 0.18%Mar 20, 2026
- Medium6.9The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier.Check if you run itEPSS 0.27%Mar 20, 2026
- Medium5.4Discourse is an open-source discussion platform.Check if you run itEPSS 0.21%Mar 20, 2026
- High8.3Ruby JSON is a JSON implementation for Ruby.Check if you run itEPSS 0.89%Mar 20, 2026
- High8.7The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests.Check if you run itEPSS 0.42%Mar 20, 2026
- Critical9.3WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend.Check if you run itEPSS 0.49%Mar 20, 2026
- High7.8Requires malware code to misuse the DDK kernel module IOCTL interface.Check if you run itEPSS 0.08%Mar 20, 2026
- Medium5.4Discourse is an open-source discussion platform.Check if you run itEPSS 0.17%Mar 20, 2026
- High8.3barebox is a bootloader.Check if you run itEPSS 0.11%Mar 20, 2026
- Critical9.6A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can trigger a write out-of-bounds write crash in the GPU shader compiler library.Check if you run itEPSS 0.31%Mar 20, 2026
- Medium6.9Charging station authentication identifiers are publicly accessible via web-based mapping platforms.Check if you run itEPSS 0.32%Mar 20, 2026
- Medium6.9The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier.Check if you run itEPSS 0.35%Mar 20, 2026
- High7.5NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing.Check if you run itEPSS 1.26%Mar 20, 2026
- High8.7The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests.Check if you run itEPSS 0.44%Mar 20, 2026
- Critical9.3WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend.Check if you run itEPSS 0.50%Mar 20, 2026
- Medium4.8Halloy is an IRC application written in Rust.Check if you run itEPSS 0.18%Mar 20, 2026
- Medium5.3Avo is a framework to create admin panels for Ruby on Rails apps.Check if you run itEPSS 0.27%Mar 20, 2026
- High7.5SimpleJWT is a simple JSON web token library written in PHP.Check if you run itEPSS 0.50%Mar 20, 2026
- High7.5SiYuan is a personal knowledge management system.Check if you run itEPSS 0.53%Mar 20, 2026
- Medium6.9A vulnerability was identified in PbootCMS up to 3.2.12.Check if you run itEPSS 0.27%Mar 20, 2026
- Medium6.8SiYuan is a personal knowledge management system.Check if you run itEPSS 0.52%Mar 20, 2026
- Critical9.1gRPC-Go is the Go language implementation of gRPC.Check if you run itEPSS 1.62%Mar 20, 2026
- High8.2HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java.Check if you run itEPSS 0.28%Mar 20, 2026
- Medium4.3Statamic is a Laravel and Git powered content management system (CMS).Check if you run itEPSS 0.37%Mar 20, 2026
- High7.5Allure 2 is the version 2.x branch of Allure Report, a multi-language test reporting tool.Check if you run itEPSS 0.56%Mar 20, 2026
Sort